An invitation link is a simple way to give a user access to an end-to-end encrypted resource. It consists of the URL of a resource (typically, a box) with an unpadded URL-safe base64 value in its “fragment” part (the part of the URL that is after the
# character). Like so:
The base64 value is a secret value that the Misakey JS app will be able to use to decrypt the content of the resource. It is not the secret decryption key of the resource itself, since we cannot be sure the invitation link won't fall into the wrong hands. Instead, it is the “user share” part of a key share of the secret key.